{ "schema_version": 1, "claims": [ { "id": "self-hosted-boundary", "claim": "The default self-hosted product path keeps stored product data on operator-controlled machines.", "status": "Verified 2026-07-14", "scope": "The default storage path implemented in ax0s-memory 0.5.0; optional model calls, website forms, analytics, and agent-provider traffic are separate paths.", "source_or_method_url": "/security/#boundary-title", "artifact_links": [ "/data/security-public.json", "/capabilities/#cap-self-hosting" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "A public release record is pending. Host hardening, operator-managed networking, optional external endpoints, and website services remain outside this default product-data boundary.", "public_owner_role": null, "allowed_public_surfaces": [ "/", "/proof/", "/memory/", "/capabilities/", "/security/", "/company/", "/access/", "/docs/", "/docs/operations/" ], "supersedes": null, "superseded_by": null }, { "id": "agent-surface-paths", "claim": "Connection paths are implemented separately for Claude Code, Codex, ChatGPT, and Hermes; a dated same-store four-surface receipt is pending.", "status": "Verified 2026-07-14", "scope": "Four separately reviewed agent-surface implementation paths; not a combined runtime claim.", "source_or_method_url": "/memory/#interfaces-title", "artifact_links": [ "/capabilities/#cap-agent-surfaces" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "The paths were reviewed separately. This does not establish simultaneous operation against one store, current runtime health, any additional surface, or externally validated identity.", "public_owner_role": null, "allowed_public_surfaces": [ "/", "/proof/", "/memory/", "/capabilities/", "/security/", "/company/", "/access/" ], "supersedes": null, "superseded_by": null }, { "id": "supersession-history", "claim": "Stale facts are superseded instead of deleted, and their history stays addressable.", "status": "Verified 2026-07-14", "scope": "The supersession behavior implemented and test-covered in ax0s-memory 0.5.0.", "source_or_method_url": "/docs/memory/#supersession", "artifact_links": [ "/capabilities/#cap-supersession", "/data/fixtures/supersession-chain.v1.json", "/data/evidence/memory-roundtrip-2026-07-14.txt" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "A public release record is pending. The public fixture remains hand-authored mechanism data; the recorded transcript is one bounded round trip, and the mechanism does not resolve every contradiction automatically.", "public_owner_role": null, "allowed_public_surfaces": [ "/", "/proof/", "/memory/", "/capabilities/", "/security/", "/company/", "/docs/", "/docs/quickstart/", "/docs/cli/", "/docs/memory/", "/live/", "/vision/" ], "supersedes": null, "superseded_by": null }, { "id": "evidence-publication-policy", "claim": "Ax0s intends to publish methodology, null results, and killed ideas as part of its evidence policy.", "status": "Method published", "scope": "Public evidence policy; not a certification or audit claim.", "source_or_method_url": "/docs/evaluation/#publication-method", "artifact_links": [], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "This states a publication intent; methodology, null-result, and killed-idea artifacts remain sparse or unavailable.", "public_owner_role": null, "allowed_public_surfaces": [ "/", "/proof/", "/docs/evaluation/" ], "supersedes": null, "superseded_by": null }, { "id": "retrieval-recall-evaluation", "claim": "The retrieval recall@10 evaluation is withheld until a fresh run and dated methodology artifact are published.", "status": "Re-run pending", "scope": "Previously published retrieval evaluation; no value is asserted in this registry.", "source_or_method_url": "/docs/evaluation/", "artifact_links": [], "checked_date": "2026-07-09", "review_or_expiry_date": null, "limitation": "Corpus, query set, relevance labels, retrieval configuration, cutoff, run date, and result artifact are not yet published together.", "public_owner_role": null, "allowed_public_surfaces": [ "/", "/proof/", "/memory/", "/security/", "/company/", "/docs/", "/docs/evaluation/", "/terms/" ], "supersedes": null, "superseded_by": null }, { "id": "consolidation-precision-evaluation", "claim": "The consolidation precision evaluation is withheld until a fresh run and dated methodology artifact are published.", "status": "Re-run pending", "scope": "Previously published human-adjudicated consolidation evaluation; no value is asserted in this registry.", "source_or_method_url": "/docs/evaluation/", "artifact_links": [], "checked_date": "2026-07-09", "review_or_expiry_date": null, "limitation": "Label protocol, class definition, evaluation population, code and configuration version, run date, and result artifact are not yet published together.", "public_owner_role": null, "allowed_public_surfaces": [ "/", "/proof/", "/company/", "/docs/evaluation/", "/terms/" ], "supersedes": null, "superseded_by": null }, { "id": "lancedb-storage", "claim": "Ax0s stores memory records in LanceDB on the operator-controlled filesystem.", "status": "Method published", "scope": "The reviewed self-hosted storage path.", "source_or_method_url": "/security/#boundary-row-storage", "artifact_links": [ "/data/security-public.json" ], "checked_date": "2026-07-09", "review_or_expiry_date": null, "limitation": "This claim does not establish an application-managed backup, restoration, retention, or at-rest encryption control.", "public_owner_role": null, "allowed_public_surfaces": [ "/proof/", "/memory/", "/security/", "/company/" ], "supersedes": null, "superseded_by": null }, { "id": "principal-access-controls", "claim": "Per-principal tokens and slug/capability grants, expiry, revocation, rate limits, default-deny enforcement, and access-audit records are implemented; record-level authorization, hardened multi-tenant isolation, and externally validated identity controls are not established.", "status": "Verified 2026-07-14", "scope": "Authentication and authorization controls in the reviewed self-hosted product source and tests.", "source_or_method_url": "/security/#auth-title", "artifact_links": [ "/data/security-public.json", "/capabilities/#cap-per-user-controls" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Record-level authorization, hardened multi-tenant isolation, and externally validated identity controls are not established. A legacy shared-bearer compatibility path remains when no principal registry is seeded or an explicit unexpired compatibility block remains. Routine full-access owner allows are intentionally omitted from access-audit records.", "public_owner_role": null, "allowed_public_surfaces": [ "/", "/proof/", "/security/", "/capabilities/", "/access/" ], "supersedes": null, "superseded_by": null }, { "id": "access-form-boundary", "claim": "The Access form is outside the self-hosted product boundary.", "status": "Method published", "scope": "The public website form and its processor path, separate from ax0s-memory.", "source_or_method_url": "/security/#boundary-row-form", "artifact_links": [ "/access/#access-form", "/privacy/#processor-purpose" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Submitting sends the enumerated request fields to Web3Forms for email delivery to the monitored founder mailbox; the page does not write them to ax0s-memory.", "public_owner_role": null, "allowed_public_surfaces": [ "/proof/", "/access/", "/privacy/", "/security/", "/memory/" ], "supersedes": null, "superseded_by": null }, { "id": "website-analytics-inactive", "claim": "Website analytics is inactive; the local analytics stub sends and stores no events.", "status": "Verified 2026-07-09", "scope": "The public website JavaScript included in this release.", "source_or_method_url": "/assets/js/analytics.js", "artifact_links": [ "/security/#boundary-row-analytics", "/privacy/#analytics-state" ], "checked_date": "2026-07-09", "review_or_expiry_date": null, "limitation": "This is the current website state, not a promise about a future analytics provider or configuration.", "public_owner_role": null, "allowed_public_surfaces": [ "/", "/proof/", "/capabilities/", "/security/", "/company/", "/access/", "/memory/", "/docs/", "/docs/quickstart/", "/docs/mcp/", "/docs/cli/", "/docs/memory/", "/docs/provenance/", "/docs/operations/", "/docs/evaluation/", "/privacy/", "/terms/", "/live/", "/practice/", "/vision/", "/receipt/" ], "supersedes": null, "superseded_by": null }, { "id": "access-processor-route", "claim": "Submissions are delivered by Web3Forms (the form processor) to a monitored founder mailbox at chris@ax0s.io.", "status": "Verified 2026-07-14", "scope": "The public Access form processor and currently configured receiving mailbox; the existing form key and destination remain in use.", "source_or_method_url": "/access/#access-form", "artifact_links": [ "/data/evidence/web3forms-provider-statements-2026-07-09.json", "/privacy/#processor-purpose" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Processor acceptance confirms delivery only; it does not approve access, begin an engagement, or promise a response time.", "public_owner_role": "Ax0s accountable operator", "allowed_public_surfaces": [ "/proof/", "/access/", "/privacy/", "/security/", "/terms/" ], "supersedes": null, "superseded_by": null }, { "id": "access-provider-retention", "claim": "Per Web3Forms' public statements (not independently captured), its retention information conflicts: 30-day free-plan submission history, no stored submissions with server-log deletion every two months, and retention of up to three years.", "status": "Re-run pending", "scope": "A dated local note of the provider's public pricing and FAQ statements; not an independent primary capture.", "source_or_method_url": "/data/evidence/web3forms-provider-statements-2026-07-09.json", "artifact_links": [ "/privacy/#processor-retention" ], "checked_date": "2026-07-09", "review_or_expiry_date": null, "limitation": "The exact statements were not independently captured and may have changed; Ax0s does not claim a shorter provider retention period.", "public_owner_role": null, "allowed_public_surfaces": [ "/proof/", "/access/", "/privacy/" ], "supersedes": null, "superseded_by": null }, { "id": "documentation-version", "claim": "The public documentation targets ax0s-memory 0.5.0; the CLI parser, MCP stdio startup, and recall serialization paths are implemented and test-covered.", "status": "Verified 2026-07-14", "scope": "The public MCP, module CLI, and recall serialization implementation and static test-definition boundary for product version 0.5.0.", "source_or_method_url": "/data/fixtures/code-to-record.v1.json", "artifact_links": [ "/docs/quickstart/#version-contract" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Implemented and test-covered does not mean a current full-suite run, compatibility certification, coverage report, or support promise.", "public_owner_role": null, "allowed_public_surfaces": [ "/proof/", "/docs/", "/docs/quickstart/", "/docs/mcp/", "/docs/cli/" ], "supersedes": null, "superseded_by": null }, { "id": "business-state-direction", "claim": "Ax0s is building toward one declared, structured, connected, visible, and navigable state across a business's people and systems.", "status": "Direction", "scope": "The Ax0s operating thesis across people and systems; not a statement of current business-wide product coverage.", "source_or_method_url": "/vision/#operating-thesis", "artifact_links": [], "checked_date": "2026-07-11", "review_or_expiry_date": null, "limitation": "This is direction, not a shipped capability, complete accountability model, customer outcome, or finished company operating plane.", "public_owner_role": "Ax0s accountable operator", "allowed_public_surfaces": [ "/", "/live/", "/practice/", "/vision/" ], "supersedes": null, "superseded_by": null }, { "id": "fleet-declared-system", "claim": "A fleet manifest declares four nodes, expected services, monitored domains, and ownership roles.", "status": "Internal dogfood", "scope": "The declared manifest for the Ax0s internal fleet first instance.", "source_or_method_url": "/vision/#first-instance", "artifact_links": [], "checked_date": "2026-07-11", "review_or_expiry_date": null, "limitation": "The row has no dated runtime artifact; it does not establish that all four nodes are operating, current cadence, customer deployment, or business-wide coverage.", "public_owner_role": "Ax0s accountable operator", "allowed_public_surfaces": [ "/", "/vision/" ], "supersedes": null, "superseded_by": null }, { "id": "fleet-drift-reconciliation", "claim": "Declared-versus-observed comparison is configured to run twice hourly; deviations are defined as drift records, and undeclared findings enter an adopt-or-kill decision queue.", "status": "Internal dogfood", "scope": "The configured declare-observe-adjudicate loop for the Ax0s internal fleet.", "source_or_method_url": "/vision/#reconciliation-loop", "artifact_links": [], "checked_date": "2026-07-11", "review_or_expiry_date": null, "limitation": "The row has no dated reconciliation receipt; it does not establish successful cadence, completed business-wide reconciliation, or a customer operating surface.", "public_owner_role": "Ax0s accountable operator", "allowed_public_surfaces": [ "/vision/" ], "supersedes": null, "superseded_by": null }, { "id": "workspace-agent-surface", "claim": "Gmail and Google Calendar are live on the agent surface: authorized agents can read and act through configured Workspace tools. Their state is not yet continuously ingested into ax0s-memory.", "status": "Superseded", "scope": "LIVE — AGENT SURFACE only for the configured Google Workspace tools recorded in the sanitized receipt.", "source_or_method_url": "/live/#evidence-boundary", "artifact_links": [ "/data/evidence/workspace-agent-surface-2026-07-14.json" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "The receipt proves server startup, tool registration, and one bounded authorized read on the recorded date. It does not prove continuous operation, persistent ingest, production health, or customer availability.", "public_owner_role": "Ax0s integration operator", "allowed_public_surfaces": [ "/", "/live/" ], "supersedes": null, "superseded_by": "workspace-agent-surface-2" }, { "id": "live-golden-regression", "claim": "A historical Ax0s Live regression artifact records 190 of 190 scenarios passing across seven connector families in 176,480 ms.", "status": "Verified 2026-07-14", "scope": "One historical stored golden regression result across seven connector families.", "source_or_method_url": "/live/#evidence-boundary", "artifact_links": [ "/data/evidence/live-golden-regression-historical.json" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Historical stored regression receipt — not current health. It does not establish current production health, live customer integrations, freshness, or persistent ingest into ax0s-memory.", "public_owner_role": "Ax0s integration operator", "allowed_public_surfaces": [ "/live/", "/proof/" ], "supersedes": null, "superseded_by": null }, { "id": "live-cross-connector-stress", "claim": "A historical Ax0s Live cross-connector stress artifact records 50 of 50 scenarios passing, including three spanning all seven connector families.", "status": "Verified 2026-07-14", "scope": "One historical stored multi-source stress result containing scenarios across two to seven connector families.", "source_or_method_url": "/live/#evidence-boundary", "artifact_links": [ "/data/evidence/live-cross-connector-stress-historical.json" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Historical stored regression receipt — not current health. It does not establish production uptime, current connector freshness, customer availability, or persistent ingest.", "public_owner_role": "Ax0s integration operator", "allowed_public_surfaces": [ "/live/", "/proof/" ], "supersedes": null, "superseded_by": null }, { "id": "live-single-connector-stress", "claim": "A historical Ax0s Live single-connector stress artifact records 140 of 140 scenarios passing, twenty per connector family.", "status": "Verified 2026-07-14", "scope": "One historical stored stress result with twenty scenarios for each of seven connector families.", "source_or_method_url": "/live/#evidence-boundary", "artifact_links": [ "/data/evidence/live-single-connector-stress-historical.json" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Historical stored regression receipt — not current health. It does not establish production uptime, current connector freshness, customer availability, or persistent ingest.", "public_owner_role": "Ax0s integration operator", "allowed_public_surfaces": [ "/live/", "/proof/" ], "supersedes": null, "superseded_by": null }, { "id": "live-schema-catalog", "claim": "One anonymized Ax0s Live source catalog recorded 147 tables, 1,836 scalar fields, 1,263 relationships, and 245,161 rows when introspected on 2026-03-11.", "status": "Verified 2026-07-14", "scope": "One historical anonymized event-operations source catalog; separate from every multi-source registry snapshot and regression result.", "source_or_method_url": "/live/#evidence-boundary", "artifact_links": [ "/data/evidence/live-schema-catalog-historical.json" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Historical stored regression receipt — not current health. This one-source catalog must not be combined with a separate multi-source schema scope and does not establish client outcomes or persistent ingest.", "public_owner_role": "Ax0s integration operator", "allowed_public_surfaces": [ "/live/", "/proof/" ], "supersedes": null, "superseded_by": null }, { "id": "live-unified-fabric", "claim": "Entity-fabric Phase 0 is implemented in ax0s-memory; connector migration and the unified operating surface remain in build.", "status": "In build", "scope": "Phase 0 entity rows, receipt-gated writes, provenance, query, ownership roles, and supersession on the Memory substrate.", "source_or_method_url": "/live/#one-engine", "artifact_links": [ "/data/integrations-public.json", "/memory/#ownership-model" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Phase 0 only. Connector migration, customer-ready ownership workflows, and the unified operating surface remain in build; this is not business-wide coverage.", "public_owner_role": "Ax0s product maintainer", "allowed_public_surfaces": [ "/", "/live/", "/memory/", "/practice/", "/vision/" ], "supersedes": null, "superseded_by": null }, { "id": "ingest-secret-redaction", "claim": "Automated secret redaction is not part of current ingest paths.", "status": "Superseded", "scope": "Current Memory and Ax0s Live ingest paths described by the public product and integration boundaries.", "source_or_method_url": "/security/#operations-title", "artifact_links": [ "/data/security-public.json", "/live/#ingest-boundary" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Source permissions, integration scope, secret handling, retention, and data handling require operator review before persistent ingest is enabled.", "public_owner_role": "Ax0s security operator", "allowed_public_surfaces": [ "/", "/live/", "/security/", "/memory/", "/proof/" ], "supersedes": null, "superseded_by": "ingest-secret-redaction-2" }, { "id": "memory-roundtrip-supersession", "claim": "A correction can become current while the prior record remains addressable.", "status": "Verified 2026-07-14", "scope": "Recorded ax0s-memory 0.5.0 product transcript covering write, recall, human-confirmed supersession, current recall, history recall, session close, and cleanup.", "source_or_method_url": "/docs/memory/#supersession", "artifact_links": [ "/data/evidence/memory-roundtrip-2026-07-14.txt" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "One recorded product round trip on the stated environment; not a compatibility, concurrency, durability, or universal contradiction-resolution claim.", "public_owner_role": "Ax0s product maintainer", "allowed_public_surfaces": [ "/", "/memory/", "/proof/", "/docs/", "/docs/quickstart/", "/docs/memory/", "/live/" ], "supersedes": null, "superseded_by": null }, { "id": "memory-mcp-tool-snapshot", "claim": "The current source snapshot registers 34 MCP tools; four are documented as the public core subset.", "status": "Verified 2026-07-14", "scope": "Anchored count of MCP tool decorators in the current ax0s-memory source snapshot and the four-tool public documentation subset.", "source_or_method_url": "/docs/mcp/#tool-contract", "artifact_links": [ "/data/evidence/memory-static-counts-2026-07-14.json" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "A static registration count is not a startup, invocation, health, compatibility, or customer-availability receipt.", "public_owner_role": "Ax0s product maintainer", "allowed_public_surfaces": [ "/proof/", "/docs/", "/docs/mcp/" ], "supersedes": null, "superseded_by": null }, { "id": "memory-http-test-definitions", "claim": "The ax0s-memory HTTP surface has 48 test functions defined in the current source snapshot.", "status": "Verified 2026-07-14", "scope": "Static count of HTTP test-function definitions in the current source snapshot.", "source_or_method_url": "/docs/#http-surface", "artifact_links": [ "/data/evidence/memory-static-counts-2026-07-14.json" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Test definitions are not a current test run, passing-suite receipt, coverage report, security review, or runtime-health claim.", "public_owner_role": "Ax0s product maintainer", "allowed_public_surfaces": [ "/proof/", "/docs/" ], "supersedes": null, "superseded_by": null }, { "id": "memory-audit-test-definitions", "claim": "Ten static audit-helper tests are defined for log helpers, recording, record round-trip, and CLI behavior.", "status": "Verified 2026-07-14", "scope": "Static test-function definitions for the audit-helper file in the current source snapshot.", "source_or_method_url": "/docs/#source-counts", "artifact_links": [ "/data/evidence/memory-static-counts-2026-07-14.json" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "This narrow count does not establish broad access-event coverage, tamper evidence, a current passing run, or coverage percentage.", "public_owner_role": "Ax0s product maintainer", "allowed_public_surfaces": [ "/proof/", "/docs/" ], "supersedes": null, "superseded_by": null }, { "id": "research-rust-test-definitions", "claim": "The experimental Rust research engine contains 245 explicit Rust test definitions.", "status": "Verified 2026-07-14", "scope": "Static count of explicit Rust test definitions in the scoped experimental research engine.", "source_or_method_url": "/docs/#source-counts", "artifact_links": [ "/data/evidence/memory-static-counts-2026-07-14.json" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "The engine is experimental and not integrated into the product. This count is not a current passing run or product-capability claim.", "public_owner_role": "Ax0s research maintainer", "allowed_public_surfaces": [ "/proof/", "/docs/" ], "supersedes": null, "superseded_by": null }, { "id": "practice-engagement-protocol", "claim": "The published Ax0s Practice method defines five stages: fit check, evidence inventory, human review, report-card readout, and optional bounded remediation.", "status": "Method published", "scope": "The public Practice engagement method and its five stages; a human-reviewed service method, not an automated score, customer outcome, or service-performance claim.", "source_or_method_url": "/practice/#engagement-protocol", "artifact_links": [ "/practice/#report-card" ], "checked_date": "2026-07-14", "review_or_expiry_date": null, "limitation": "Publication documents the method and blank report-card structure only; it supplies no client scores or completed-engagement evidence. Structured intake and default access and retention terms are not yet published.", "public_owner_role": "Ax0s accountable operator", "allowed_public_surfaces": [ "/", "/live/", "/practice/", "/vision/" ], "supersedes": null, "superseded_by": null }, { "id": "workspace-agent-surface-2", "claim": "Gmail and Google Calendar are live on the agent surface: authorized agents can read and act through configured Workspace tools. Inbound Gmail for one mailbox is continuously ingested into ax0s-memory; Calendar state is not.", "status": "Superseded", "scope": "LIVE — AGENT SURFACE for the configured Google Workspace tools recorded in the sanitized receipt, plus persistent inbound-Gmail ingest for one mailbox recorded in the dated ingest receipt.", "source_or_method_url": "/live/#evidence-boundary", "artifact_links": [ "/data/evidence/workspace-agent-surface-2026-07-14.json", "/data/evidence/gmail-persistent-ingest-2026-07-15.json" ], "checked_date": "2026-07-15", "review_or_expiry_date": null, "limitation": "The receipts prove agent access, one bounded authorized read, and one persistent-ingest cycle with checkpoint, deduplication, and later recall on the recorded dates. They do not prove continuous operation, production health, or customer availability; Calendar and Drive state is not persistently ingested.", "public_owner_role": "Ax0s integration operator", "allowed_public_surfaces": [ "/", "/live/" ], "supersedes": "workspace-agent-surface", "superseded_by": "workspace-agent-surface-3" }, { "id": "workspace-agent-surface-3", "claim": "Gmail, Google Calendar, and Google Drive (files and Docs text) are continuously ingested into ax0s-memory on 5-minute cycles; authorized agents can also read and act through configured Workspace tools. Sheets and Slides content is not ingested.", "status": "Verified 2026-07-17", "scope": "LIVE — persistent Gmail, Calendar, and Drive/Docs ingest for one account recorded in the dated ingest receipts, plus the agent surface for the configured Google Workspace tools recorded in the sanitized receipt.", "source_or_method_url": "/live/#evidence-boundary", "artifact_links": [ "/data/evidence/workspace-agent-surface-2026-07-14.json", "/data/evidence/gmail-persistent-ingest-2026-07-15.json", "/data/evidence/gcal-persistent-ingest-2026-07-17.json", "/data/evidence/gdrive-persistent-ingest-2026-07-17.json" ], "checked_date": "2026-07-17", "review_or_expiry_date": null, "limitation": "The receipts prove agent access and persistent-ingest cycles with checkpoint, deduplication, and later recall on the recorded dates. They do not prove continuous operation, a completed Drive bootstrap, production health, or customer availability; Sheets and Slides content is not ingested.", "public_owner_role": "Ax0s integration operator", "allowed_public_surfaces": [ "/", "/live/" ], "supersedes": "workspace-agent-surface-2", "superseded_by": null }, { "id": "ingest-secret-redaction-2", "claim": "Automated secret redaction runs on the Fathom and Gmail persistent-ingest paths before any write; other ingest paths remain unredacted.", "status": "Superseded", "scope": "The ax0s-ingest Fathom and Gmail persistent-ingest paths; all other Memory and Ax0s Live ingest paths remain unredacted.", "source_or_method_url": "/security/#operations-title", "artifact_links": [ "/data/evidence/fathom-persistent-ingest-2026-07-15.json", "/data/evidence/gmail-persistent-ingest-2026-07-15.json" ], "checked_date": "2026-07-15", "review_or_expiry_date": null, "limitation": "Redaction is pattern-based over known secret shapes and is applied at the write chokepoint of the two named ingest paths only; it is not a guarantee against novel secret formats, and other ingest paths remain unredacted.", "public_owner_role": "Ax0s security operator", "allowed_public_surfaces": [ "/", "/live/", "/security/", "/memory/", "/proof/" ], "supersedes": "ingest-secret-redaction", "superseded_by": "ingest-secret-redaction-3" }, { "id": "ingest-secret-redaction-3", "claim": "Automated secret redaction runs on the Fathom, Gmail, Google Calendar, Google Drive, and SignWell persistent-ingest paths before any write; the iMessage path and other ingest paths remain unredacted.", "status": "Superseded", "scope": "The ax0s-ingest Fathom, Gmail, Google Calendar, Google Drive, and SignWell persistent-ingest paths; the iMessage path and all other Memory and Ax0s Live ingest paths remain unredacted.", "source_or_method_url": "/security/#operations-title", "artifact_links": [ "/data/evidence/fathom-persistent-ingest-2026-07-15.json", "/data/evidence/gmail-persistent-ingest-2026-07-15.json", "/data/evidence/gcal-persistent-ingest-2026-07-17.json", "/data/evidence/gdrive-persistent-ingest-2026-07-17.json", "/data/evidence/signwell-connector-contract-2026-07-17.json" ], "checked_date": "2026-07-17", "review_or_expiry_date": null, "limitation": "Redaction is pattern-based over known secret shapes and is applied at the write chokepoint of the five named ingest paths only; it is not a guarantee against novel secret formats, and other ingest paths remain unredacted.", "public_owner_role": "Ax0s security operator", "allowed_public_surfaces": [ "/", "/live/", "/security/", "/memory/", "/proof/" ], "supersedes": "ingest-secret-redaction-2", "superseded_by": "ingest-secret-redaction-4" }, { "id": "ingest-secret-redaction-4", "claim": "Automated secret redaction runs on the Fathom, Gmail, Google Calendar, Google Drive, SignWell, Stripe, and Mercury persistent-ingest paths before any write; the iMessage path and other ingest paths remain unredacted.", "status": "Verified 2026-07-20", "scope": "The ax0s-ingest Fathom, Gmail, Google Calendar, Google Drive, SignWell, Stripe, and Mercury persistent-ingest paths; the iMessage path and all other Memory and Ax0s Live ingest paths remain unredacted.", "source_or_method_url": "/security/#operations-title", "artifact_links": [ "/data/evidence/fathom-persistent-ingest-2026-07-15.json", "/data/evidence/gmail-persistent-ingest-2026-07-15.json", "/data/evidence/gcal-persistent-ingest-2026-07-17.json", "/data/evidence/gdrive-persistent-ingest-2026-07-17.json", "/data/evidence/signwell-connector-contract-2026-07-17.json", "/data/evidence/stripe-connector-contract-2026-07-20.json", "/data/evidence/mercury-persistent-ingest-2026-07-20.json" ], "checked_date": "2026-07-20", "review_or_expiry_date": null, "limitation": "Redaction is pattern-based over known secret shapes and is applied at the write chokepoint of the seven named ingest paths only; it is not a guarantee against novel secret formats, and other ingest paths remain unredacted.", "public_owner_role": "Ax0s security operator", "allowed_public_surfaces": [ "/", "/live/", "/security/", "/memory/", "/proof/" ], "supersedes": "ingest-secret-redaction-3", "superseded_by": null } ] }